Re: BIND 9.5.1-P3 compilation problems.

2009-08-11 Thread Emery

Mark -

Thanks for your notes. I will attempt to find a window to update the 
system patch level. This is especially frustration because I performed 
the upgrade on a disaster recovery system last week and it worked 
flawlessly. Hopefully patching the system will get us there. If so, I'll 
be sure to update the listserver, for the benefit of another poor soul 
in the same boat. :-)


Thanks again!

Emery.

Mark Andrews wrote:

In message <4a820186.20...@gmail.com>, Emery writes:
  

This is a multi-part message in MIME format.
--000608010205070908020408
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit


Mark,

I am not really sure which error is the actual indicator of the 
aforementioned problem.  I've attached the config.log. Your insight is 
most welcome!



This looks like a broken .  The "checking for ANSI C
header files" also failed earlier in the build process.  This could
be because Sun's header files are broken or it could be gcc's "fixes"
arn't correct.

I suspect that there is a typedef for ctid_t not being made when
-D_XPG4_2 -D__EXTENSIONS__ are set on the command line.

I would make sure that your OS is fully patched then re-run
"fixincludes", if I remember the command name correctly, from the
gcc distribution.

Mark

configure:6112: gcc -o conftest -g -O2 -I/usr/local/ssl/include  -D_XPG4_2 -D__E
XTENSIONS__  conftest.c  -L/usr/local/ssl/lib -R/usr/local/ssl/lib -lcrypto >&5
In file included from /usr/include/sys/wait.h:24,
 from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/include/sys/siginfo.h:259: error: syntax error before "ctid_t"
/usr/include/sys/siginfo.h:292: error: syntax error before '}' token
/usr/include/sys/siginfo.h:294: error: syntax error before '}' token
/usr/include/sys/siginfo.h:390: error: syntax error before "ctid_t"
/usr/include/sys/siginfo.h:398: error: conflicting types for '__fault'
/usr/include/sys/siginfo.h:267: error: previous declaration of '__fault' was her
e
/usr/include/sys/siginfo.h:404: error: conflicting types for '__file'
/usr/include/sys/siginfo.h:273: error: previous declaration of '__file' was here
/usr/include/sys/siginfo.h:420: error: conflicting types for '__prof'
/usr/include/sys/siginfo.h:287: error: previous declaration of '__prof' was here
/usr/include/sys/siginfo.h:424: error: conflicting types for '__rctl'
/usr/include/sys/siginfo.h:291: error: previous declaration of '__rctl' was here
/usr/include/sys/siginfo.h:426: error: syntax error before '}' token
/usr/include/sys/siginfo.h:428: error: syntax error before '}' token
/usr/include/sys/siginfo.h:432: error: syntax error before "k_siginfo_t"
/usr/include/sys/siginfo.h:437: error: syntax error before '}' token
In file included from /usr/include/sys/procset.h:24,
 from /usr/include/sys/wait.h:25,
 from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/local/lib/gcc/sparc-sun-solaris2.9/3.4.6/include/sys/signal.h:96: error: sy
ntax error before "siginfo_t"
In file included from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/include/sys/wait.h:86: error: syntax error before "siginfo_t"

  

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.5.1-P3 compilation problems.

2009-08-11 Thread Mark Andrews

In message <4a820186.20...@gmail.com>, Emery writes:
> This is a multi-part message in MIME format.
> --000608010205070908020408
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> Content-Transfer-Encoding: 7bit
> 
> 
> Mark,
> 
> I am not really sure which error is the actual indicator of the 
> aforementioned problem.  I've attached the config.log. Your insight is 
> most welcome!

This looks like a broken .  The "checking for ANSI C
header files" also failed earlier in the build process.  This could
be because Sun's header files are broken or it could be gcc's "fixes"
arn't correct.

I suspect that there is a typedef for ctid_t not being made when
-D_XPG4_2 -D__EXTENSIONS__ are set on the command line.

I would make sure that your OS is fully patched then re-run
"fixincludes", if I remember the command name correctly, from the
gcc distribution.

Mark

configure:6112: gcc -o conftest -g -O2 -I/usr/local/ssl/include  -D_XPG4_2 -D__E
XTENSIONS__  conftest.c  -L/usr/local/ssl/lib -R/usr/local/ssl/lib -lcrypto >&5
In file included from /usr/include/sys/wait.h:24,
 from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/include/sys/siginfo.h:259: error: syntax error before "ctid_t"
/usr/include/sys/siginfo.h:292: error: syntax error before '}' token
/usr/include/sys/siginfo.h:294: error: syntax error before '}' token
/usr/include/sys/siginfo.h:390: error: syntax error before "ctid_t"
/usr/include/sys/siginfo.h:398: error: conflicting types for '__fault'
/usr/include/sys/siginfo.h:267: error: previous declaration of '__fault' was her
e
/usr/include/sys/siginfo.h:404: error: conflicting types for '__file'
/usr/include/sys/siginfo.h:273: error: previous declaration of '__file' was here
/usr/include/sys/siginfo.h:420: error: conflicting types for '__prof'
/usr/include/sys/siginfo.h:287: error: previous declaration of '__prof' was here
/usr/include/sys/siginfo.h:424: error: conflicting types for '__rctl'
/usr/include/sys/siginfo.h:291: error: previous declaration of '__rctl' was here
/usr/include/sys/siginfo.h:426: error: syntax error before '}' token
/usr/include/sys/siginfo.h:428: error: syntax error before '}' token
/usr/include/sys/siginfo.h:432: error: syntax error before "k_siginfo_t"
/usr/include/sys/siginfo.h:437: error: syntax error before '}' token
In file included from /usr/include/sys/procset.h:24,
 from /usr/include/sys/wait.h:25,
 from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/local/lib/gcc/sparc-sun-solaris2.9/3.4.6/include/sys/signal.h:96: error: sy
ntax error before "siginfo_t"
In file included from /usr/include/stdlib.h:22,
 from /usr/local/ssl/include/openssl/err.h:66,
 from conftest.c:27:
/usr/include/sys/wait.h:86: error: syntax error before "siginfo_t"

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.5.1-P3 compilation problems.

2009-08-11 Thread Mark Andrews

In message <4a8155df.8010...@gmail.com>, Emery writes:
> Good morning,
> 
> I've conducted two maintenance windows to upgrade our BIND primary 
> server to the new code to address the recent security vulnerability, but 
> cannot get past the error below.

One can compile and test named at anytime.  Only the
installation need to be done in a maintenance window.

> I have Openssl 9.8.0k installed. I have 
> no problems running tests from the openssl prompt. I have tried 
> exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory 
> and have run the compilation with the --with-openssl=/usr/local/ssl 
> switch to no avail.
> 
> I am running Solaris 10 Sparc -
> 
> I know that there is a precompiled version of this BIND release on 
> Sunfreeware, but I am trying to upgrade our primary nameserver and would 
> rather to this than a clean uninstall/install.
> 
> Is there any insight into what wall I'm running into?
> 
> 
> checking for strings.h... yes
> checking for inttypes.h... yes
> checking for stdint.h... yes
> checking for unistd.h... (cached) yes
> checking for size_t... yes
> checking for ssize_t... yes
> checking for uintptr_t... yes
> checking for socklen_t... yes
> checking whether time.h and sys/time.h may both be included... yes
> checking for long long... yes
> checking for struct lifconf... no
> checking for kqueue... no
> checking epoll support... no
> checking sys/devpoll.h usability... yes
> checking sys/devpoll.h presence... yes
> checking for sys/devpoll.h... yes
> checking if unistd.h or sys/types.h defines fd_set... yes
> checking whether byte ordering is bigendian... yes
> checking for OpenSSL library... using OpenSSL from /usr/local/ssl/lib 
> and /usr/local/ssl/include
> checking whether linking with OpenSSL works... no
> configure: error: Could not run test program using OpenSSL from
> /usr/local/ssl/lib and /usr/local/ssl/include.
> Please check the argument to --with-openssl and your
> shared library configuration (e.g., LD_LIBRARY_PATH).

What is in config.log?
 ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.5.1-P3 compilation problems.

2009-08-11 Thread bsfinkel
Emery  wrote:

>I've conducted two maintenance windows to upgrade our BIND primary 
>server to the new code to address the recent security vulnerability, but 
>cannot get past the error below. I have Openssl 9.8.0k installed. I have 
>no problems running tests from the openssl prompt. I have tried 
>exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory 
>and have run the compilation with the --with-openssl=/usr/local/ssl 
>switch to no avail.
>
>I am running Solaris 10 Sparc -
>
>I know that there is a precompiled version of this BIND release on 
>Sunfreeware, but I am trying to upgrade our primary nameserver and would 
>rather to this than a clean uninstall/install.
>
>Is there any insight into what wall I'm running into?
>
>
>checking for strings.h... yes
>checking for inttypes.h... yes
>checking for stdint.h... yes
>checking for unistd.h... (cached) yes
>checking for size_t... yes
>checking for ssize_t... yes
>checking for uintptr_t... yes
>checking for socklen_t... yes
>checking whether time.h and sys/time.h may both be included... yes
>checking for long long... yes
>checking for struct lifconf... no
>checking for kqueue... no
>checking epoll support... no
>checking sys/devpoll.h usability... yes
>checking sys/devpoll.h presence... yes
>checking for sys/devpoll.h... yes
>checking if unistd.h or sys/types.h defines fd_set... yes
>checking whether byte ordering is bigendian... yes
>checking for OpenSSL library... using OpenSSL from /usr/local/ssl/lib 
>and /usr/local/ssl/include
>checking whether linking with OpenSSL works... no
>configure: error: Could not run test program using OpenSSL from
>/usr/local/ssl/lib and /usr/local/ssl/include.
>Please check the argument to --with-openssl and your
>shared library configuration (e.g., LD_LIBRARY_PATH).

When I built BIND 9.6.1-P1 on Solaris 10 I used the following commands:

unsetenv LD_LIBRARY_PATH

set path=(/usr/sfw/bin/ /usr/sbin /usr/bin /usr/etc /usr/ccs/bin \
 /usr/afsws/local/bin)

./configure --prefix=/export/home/named/bind \
--sysconfdir=/export/home/named --enable-threads --localstatedir=/var \
--with-gssapi=/usr --with-libxml2=/usr

I am not sure what we have in

 /usr/afsws/local/bin

(if anything) that I need.

After the build I ran

 strings /usr/sfw/lib/libcrypto.so.0.9.7 | grep SSL

and I get, in part,

 OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969
   CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339
   CVE-2006-4343 CVE-2007-5135 CVE-2008-5077 CVE-2009-0590)

I did this because I got a warning message about a back-level OpenSSL
Crypto library.  The file name has "0.9.7", but that file does contain
fixes for vulnerabilities.  This is on a

 SunOS ... 5.10 Generic_141414-02 sun4u sparc SUNW,Sun-Fire-V240

system.  Note that I used different commands when building this BIND
on a Solaris 9 system.
--
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory  Phone:+1 (630) 252-7277
9700 South Cass Avenue   Facsimile:+1 (630) 252-4601
Building 222, Room D209  Internet: bsfin...@anl.gov
Argonne, IL   60439-4828 IBMMAIL:  I1004994
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.5.1-P3 compilation problems.

2009-08-11 Thread Anatoly Pugachev

Hello!

If you don't need DNSSEC for your zones, you can compile bind without
SSL support, like "./configure --with-openssl=no"

On 11.08.2009 / 07:28:31 -0400, Emery wrote:
> Good morning,
>
> I've conducted two maintenance windows to upgrade our BIND primary  
> server to the new code to address the recent security vulnerability, but  
> cannot get past the error below. I have Openssl 9.8.0k installed. I have  
> no problems running tests from the openssl prompt. I have tried  
> exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory  
> and have run the compilation with the --with-openssl=/usr/local/ssl  
> switch to no avail.
>
> I am running Solaris 10 Sparc -
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users